ALASDOCKER-2023-031

2024-05-09: CVE-2022-41723 was added to this advisory.

2023-11-29: CVE-2023-24538 was added to this advisory.

2023-10-31: CVE-2023-24540 was added to this advisory.

http2/hpack: avoid quadratic complexity in hpack decoding (CVE-2022-41723)

Templates did not properly consider backticks (`) as Javascript string delimiters, and as such did
not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template
contained a Go template action within a Javascript template literal, the contents of the action could
be used to terminate the literal, injecting arbitrary Javascript code into the Go template. (CVE-2023-24538)

html/template: improper handling of JavaScript whitespace.

Not all valid JavaScript whitespace characters were considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution. (CVE-2023-24540)

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. (CVE-2023-39325)

aarch64:
    docker-20.10.25-1.amzn2.0.3.aarch64
    docker-debuginfo-20.10.25-1.amzn2.0.3.aarch64

src:
    docker-20.10.25-1.amzn2.0.3.src

x86_64:
    docker-20.10.25-1.amzn2.0.3.x86_64
    docker-debuginfo-20.10.25-1.amzn2.0.3.x86_64